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Amendments to the Claims: 

1 . (Currently Amended) A computerized method comprising: 

defining a protection domain for a set of errors using an association between data 
and a first integrity metadata, the protection domain to protect data traversing an input/output 
(I/O) datapath having a storage device and a first generation integrity point for a host as 
opposite endpoints; [[and]] 

defining a first sub-domain nested within the protection domain using an association 
between the data and a second integrity metadata, the first sub-domain to further protect 
data traversing a portion of the datapath having a second generation integrity point as an 
endpoint[[.]]; 

defining a second sub-domain nested within the protection domain using an 
association between the data and a third integrity metadata, the second sub-domain to 
further protect data traversing a portion of the datapath having a third generation integrity 
point as an endpoint: and 

wherein the first and second sub-domains are nested in the protection domain as a 
hierarchy. 

2. (Cancelled) 

3. (Cancelled) 

4. (Currently Amended) The computerized method of claim [[2]] 1, wherein the 
third integrity metadata is operable to detect a subset of the set of data errors. 

5. (Original) The computerized method of claim 1 , wherein the first integrity 
metadata is operable to detect a first subset of the set of data errors. 

6. (Original) The computerized method of claim 5, wherein the second integrity 
metadata is operable to detect a second subset of the set of data errors. 

7. (Original) The computerized method of claim 6, wherein the first and second 
subsets together are operable to detect the set of data errors. 

8. (Original) The computerized method of claim 1 , wherein the portion of the 
datapath protected by the first sub-domain has one of the storage device and host as an 
opposite endpoint. 



2 



Attorney Docket No. 1 881 1 9/US 



9. (Original) The computerized method of claim 1 , wherein the set of data errors 
comprises bit corruption, misdirected I/O, and phantom I/O. 

1 0. (Original) The computerized method of claim 1 further comprising: 
detecting a data error within the protection domain using at least one of the first and 

second integrity metadata; and 

identifying a portion of the I/O data path as a potential source of the data error. 

1 1 . (Original) The computerized method of claim 1 0, wherein detecting a data 
error comprises: 

validating the data at one of the first and second integrity points. 

12. (Original) The computerized method of claim 10 further comprising: 
retrying a data transfer at the potential source of the data error. 

13. (Original) The computerized method of claim 12 wherein retrying comprises: 
resuming the data transfer using a replica. 

14. (Original) The computerized method of claim 10 further comprising: 
retrying a data transfer at an integrity point prior to the potential source of the data 

error. 

15. (Original) The computerized method of claim 1 , wherein a replication point is 
co-located with at least one of the first and second generation integrity points. 

16. (Original) The computerized method of claim 1 further comprising: 
establishing the first generation integrity point for the host; and 

establishing the second generation integrity point for an intermediary component in 
the datapath. 

17. (Currently Amended) An article of manufacture comprising: 

a tangible computer usable medium having computer readable instructions embodied 
therein to cause a processor to execute a method comprising: 

defining a protection domain for a set of errors using an association between data 
and a first integrity metadata, the protection domain to protect data traversing an input/output 
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(I/O) datapath having a storage device and a first generation integrity point for a host as 
opposite endpoints; [[and]] 

defining a first sub-domain nested within the protection domain using an association 
between the data and a second integrity metadata, the first sub-domain to further protect 
data traversing a portion of the datapath having a second generation integrity point as an 
endpoint[[.]]i 

defining a second sub-domain nested within the protection domain using an 
association between the data and a third integrity metadata, the second sub-domain to 
further protect data traversing a position of the datapath having a third generation integrity 
point as an endpoint; and 

wherein the first and second sub-domains are nested in the protection domain as a 
hierarchy. 

18. (Cancelled) 

19. (Cancelled) 

20. (Currently Amended) The article of manufacture of claim [[1 8]] 17, wherein 
the third integrity metadata is operable to detect a subset of the set of data errors. 

21 . (Previously Presented) The article of manufacture of claim 1 7, wherein the 
first integrity metadata is operable to detect a first subset of the set of data errors. 

22. (Previously Presented) The article of manufacture of claim 21 , wherein the 
second integrity metadata is operable to detect a second subset of the set of data errors. 

23. (Previously Presented) The article of manufacture of claim 22, wherein the 
first and second subsets together are operable to detect the set of data errors. 

24. (Previously Presented) The article of manufacture of claim 1 7, wherein the 
portion of the datapath protected by the first sub-domain has one of the storage device and 
host as an opposite endpoint. 

25. (Previously Presented) The article of manufacture of claim 1 7, wherein the set 
of data errors comprises bit corruption, misdirected I/O, and phantom I/O. 
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26. (Previously Presented) The article of manufacture of claim 1 7, wherein the 
method further comprises: 

detecting a data error within the protection domain using at least one of the first and 
second integrity metadata; and 

identifying a portion of the I/O data path as a potential source of the data error. 

27. (Previously Presented) The article of manufacture of claim 26, wherein 
detecting a data error comprises: 

validating the data at one of the first and second integrity points. 

28. (Previously Presented) The article of manufacture of claim 26, wherein the 
method further comprises: 

retrying a data transfer at the potential source of the data error. 

29. (Previously Presented) The article of manufacture of claim 28 wherein 
retrying comprises: 

resuming the data transfer using a replica. 

30. (Previously Presented) The article of manufacture of claim 26, wherein the 
method further comprises: 

retrying a data transfer at an integrity point prior to the potential source of the data 

error. 

31 . (Previously Presented) The article of manufacture of claim 17, wherein a 
replication point is co-located with at least one of the first and second generation integrity 
points. 

32. (Previously Presented) The article of manufacture of claim 1 7, wherein the 
method further comprises: 

establishing the first generation integrity point for the host; and 
establishing the second generation integrity point for an intermediary component in 
the datapath. 

33. (Currently Amended) An apparatus comprising: 

means for defining a protection domain for a set of errors using an association 
between data and a first integrity metadata, the protection domain to protect data traversing 
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an input/output (I/O) datapath having a storage device and a first generation integrity point 
for a host as opposite endpoints; [[and]] 

means for defining a first sub-domain nested within the protection domain using an 
association between the data and a second integrity metadata, the first sub-domain to 
further protect data traversing a portion of the datapath having a second generation integrity 
point as an endpoint[[.]] i 

means for defining a second sub-domain nested within the protection domain using 
an association between the data and a third integrity metadata, the second sub-domain to 
further protect data traversing a portion of the datapath having a third generation integrity 
point as an endpoint: 

wherein the first and second sub-domains are nested in the protection domain as a 
hierarchy; and 

wherein the third integrity metadata is operable to detect a subset of the set of data 

errors. 

34. (Cancelled) 

35. (Cancelled) 

36. (Cancelled) 

37. (Original) The apparatus of claim 33, wherein the first integrity metadata is 
operable to detect a first subset of the set of data errors. 

38. (Original) The apparatus of claim 37, wherein the second integrity metadata is 
operable to detect a second subset of the set of data errors. 

39. (Original) The apparatus of claim 38, wherein the first and second subsets 
together are operable to detect the set of data errors. 

40. (Original) The apparatus of claim 33, wherein the portion of the datapath 
protected by the first sub-domain has one of the storage device and host as an opposite 
endpoint. 

41 . (Original) The apparatus of claim 33, wherein the set of data errors comprises 
bit corruption, misdirected I/O, and phantom I/O. 
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42. (Original) The apparatus of claim 33 further comprising: 

means for detecting a data error within the protection domain using at least one of 
the first and second integrity metadata; and 

means for identifying a portion of the I/O data path as a potential source of the data 

error. 

43. (Original) The apparatus of claim 42, wherein the means for detecting a data 
error comprises: 

means for validating the data at one of the first and second integrity points. 

44. (Original) The apparatus of claim 42 further comprising: 

means for retrying a data transfer at the potential source of the data error. 

45. (Original) The apparatus of claim 44 wherein the means for retrying 
comprises: 

means for resuming the data transfer using a replica. 

46. (Original) The apparatus of claim 42 further comprising: 

means for retrying a data transfer at an integrity point prior to the potential source of 
the data error. 

47. (Original) The apparatus of claim 33, wherein a replication point is co-located 
with at least one of the first and second generation integrity points. 

48. (Original) The apparatus of claim 33 further comprising: 

means for establishing the first generation integrity point for the host; and 
means for establishing the second generation integrity point for an intermediary 
component in the datapath. 
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